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Commissioner for Patents 
P.O. Box 1450 
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Sir: 

In response to a telephone interview between Examiner Minh Dinh and the 
undersigned on January 20, 2005, please consider the following. The commissioner is 
authorized to charge any fees which may be due to Deposit Account 10-0435, but not to 
include any payment of issue fees. 

Amendments to the Claims begin on page 2 of this paper. 

Remarks begin on page 4 of this paper. 
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Amendments to the Claims: 

14. (canceled) 

15. (canceled) 

16. (canceled) 

17. (currently amended) A method of data hiding comprising the steps of: 
providing an encryption key; 

generating an encryption sequence based on the encryption key; 

providing a carrier signal that conveys infomnation unrelated to the encryption 

key; 

embedding the encryption sequence into the carrier signal^ 
transmitting the carrier signal including the embedded encryption sequence to a 
receiving location, 

extracting the encryption sequence from the composite signal at the receiving 
location, and 

deciphering the encryption sequence to obtain the encryption key at the receiving 
location. 

19. (canceled) 

20. (currently amended) A method of data hiding comprising the steps of: 
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embedding an encrypted message into a first portion of a carrier signal: and 
embedding message extraction information into a second portion of the carrier 

signal for extracting the encrypted message from the first portion of the carrier signal. 

Th e m e thod of cla i m 19, wherein the step of embedding an encrypted message 

includes perfonning an exclusive-OR of the encrypted message with the first portion of 

the carrier signal. 

26. (canceled) 

29. (currently amended) A data hiding apparatus comprising: 

an encryption sequence generator configured to generate an encryption 
sequence based on an encrypting key; 

an encrypted message generator configured to generate an encrypted message 
based on the encryption sequence and an input message; and 

an encrypted message embedder configured to embed the encrypted message 
into a carrier signal by replacing a first LSB plane of the a digital image with information 
based on a second LSB plane of the digital image and performing an exclusive-OR of 
the encrypted message with the second LSB plane of the digital image. 
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REMARKS 



Reconsideration of the above-identified patent application, as amended, is 
respectfully requested. 

In a telephone interview conducted between Examiner Dinh and the undersigned 
on January 20, 2005, it was agreed that claims 14-16, 19 and 26 would be canceled, 
that claim 20 would be amended to include all of the limitations of canceled claim 19, 
and that claim 29 would be amended to address an antecedent basis issue. 
Accordingly, claims 14-16, 19 and 26 have been canceled herein. Claims 20 and 29 
have been amended as suggested by the Examiner. Claim 17 has also been amended 
herein to correct a punctuation error. 

Claims 4-5, 17-18, 20-22 and 29 are believed to-be in condition for allowance, 
and such action is solicited. The Examiner is cordially invited to contact the 
undersigned by telephone to discuss any further unresolved matters. 
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Jeffre^.'Michael / 
Registration No. 37,394 
Barnes & Thornburg 
1 1 South Meridian Street 
Indianapolis, Indiana 46204-3335 
Telephone: (317)231-7382 
Fax: (317)231-7433 
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ABSTRACT 



A method of data hiding includes providing a message (68), 
providing an encrypting sequence (86), and generating an 
encrypted message (72) based on the message and the 
encrypting sequence. A carrier signal (66) that conveys 
information unrelated to the encrypted message is provided, 
and the encrypted message is embedded (78) into the carrier 
signal by performing an exclusive-OR of the encrypted 
message with a first portion of the carrier signal. 

8 Claims, 4 Drawing Sheets 
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HIDING OF ENCRYPTED DATA based on the encryption key is generated. The encryption 

sequence is embedded into the carrier signal. 

In preferred embodiments, the encryption key is a pubHc 

CROSS-REFERENCES TO RELATED key for an asymmetric encryption algorithm. The carrier 

APPLICATIONS 5 signal can be a signal such as a digital image, digital audio, 

or digital video. The encryption sequence is substantially 

This apphcation is a U.S. national application of interna- random, and can be generated based on a linear feedback 

tional application serial No. PCT/US98/17321 filed Aug. 21, shift register. The encryption sequence is embedded into the 

1998, which claims priority to U.S. provisional application carrier signal by performing an exclusive-OR of the encryp- 

Ser, No. 60/056,724 filed Aug. 22, 1997. tion sequence with a portion of the carrier signal. 

According to other aspects of the invention, the carrier 

FIELD OF THE INVENTION signal including the embedded encryption sequence is trans- 

TTie present invention relates to methods and apparatus "^"^^ ^° ? receiving location, llie encryption sequence is 

for hiding data within a digital signal, and particularly for extracted from the composite signal at the receivmg loca- 

conceaUng information within multimedia signals such as is ^o^O^PlJon sequence is decrypted to obtain the 

digital imige, audio, or video signals. More particularly, the ^°^n^P^;°? ^ey. The encryption key is used to generate an 

^ . ^ ' . ' . ^ J . r encrypted message at the receiving location, and the 

present invention relates to methods and apparatus for ^^^JLl.^^ e^^Z. ,^^<,:,.; i™ 

, , .. J ^ encrypted message is transmitted trom the receivmg loca- 
embeddmg and retnevmg information mto and out of a 

digital signal used in mullimec^a applications while mini- According to yet another aspect of the invention, a 

mizmg the effect on the multimedia application of the digital 20 ^^^^^ j^ta hiding is provided. An encrypted message is 

signal. embedded into a first portion of a carrier signal and message 

TiA^i-^DOTiKTT^ A KiTk cT ixxx;! A Dv iTJc cxtractioH infonuation is embcddcd iuto 3 secoud portion of 

BACKGROUND Ar^S^^ OF THE ^j^^ ^^^-^^ ^^^^ extracting the encrypted message from 

IN YEN HON ttje portion of the carrier signal. 

ITie art of concealing information has existed for millen- 1^ preferred embodiments, the encrypted message is 
nia and is one to which computers have been readily embedded by performing an exclusive-OR of the encrypted 
adapted. It is known, for example, to use computers for message with the first portion of the carrier signal. The 
encrypting data using various symmetric and asymmetric "^«^^f ^ extraction information is embedded by performing 
cryptographic schemes such as the Data Encryption Stan- ^° exclusive-OR of the first portion of the earner signal with 
dard (DES) and RSA encryption, and cryptographic soft- ^0 the second portion of the carrier signal. The first and second 
, . n/^n /n j n • \ a *i. porlioHs of the camcr signal can be first and second bit- 
ware packages such as PGP (Pretty Good Privacy). Another planes of a dieital image 
technique for concealing information for which computers . j-..n t. ri.- 

J • J . . u • L* u .L According to still another aspect of the invention, a 

are used is data hidmg or steganography, in which the ^^^^^ exchanging data hidden in a carrier signal is 

existenceofcertammforaiationisconcealedwithmacaiTier provided. A signal including hidden data is generated by 

communication. In contrast to cryptography, where it is a transforming a carrier signal from a first domain into a 

goal to make a message undecipherable regardless of its ^^^^^^ ^^^^-^ ^ embedded into the carrier 

detection, with steganography it is a goal to hide the very ^^^^^ ^^e second domain. The carrier signal is trans- 

existence of the hidden message. An example of a known fo^^jg^ t)ack from the second domain to the first domain, 

steganography technique using computers is to embed a ^-^^^ including hidden data is sent to a receiving 

digital watermark mto a digital image. location. The message is obtained from the signal including 

According to the present invention, a method of hiding hidden data at the receiving location by transforming the 

data is provided. A message to be hidden and an encrypting signal including hidden data into the second domain and 

sequence are provided along with a carrier signal that extracting the message. 

conveys information (unrelated to the message). An In preferred embodiments, the message is encrypted prior 

encrypted message is generated based on the message and to generating the signal including hidden data. The message 

the encrypting sequence. The encrypted message is embed- decrypted after obtaining the message from the signal 

ded into the carrier signal by performing an exclusive-OR of including hidden data. 

the encrypted message with a first portion of the carrier According to still yet another aspect of the invention, a 
^'S^^'- ..... 50 data hiding apparatus is provided. An encryption sequence 
In preferred embodiments, the carrier signal is a digital generator generates an encryption sequence based on an 
image, and the first portion of-the carrier signal is an LSB encrypting key. An encrypted message generator generates 
plane of the digital image. The digital image has a plurality an encrypted message based on the encryption sequence and 
of color planes, the first portion of the carrier signal is an an input message. An encrypted message embedder embeds 
LSB plane of a first color plane, and the second portion of 55 the encrypted message into a carrier signal, 
the carrier signal is an LSB plane of a second color plane. preferred embodiments, the encryption sequence gen- 
According to another aspect of the invention, the carrier erator generates a substantially random encryption 
signal is transmitted to a receiving location. The encrypted sequence. The encrypted message embedder performs an 
message is extracted and from the carrier signal and deci- exclusive-OR of the encrypted message with a portion of the 
phered at the receiving location. In preferred embodiments, carrier signal. The encrypted message embedder replaces a 
the encrypted sequence is generated based on an encrypting firet LSB plane of a digital image with information based on 
key. The encrypted message is generated by performing an a second LSB plane of the digital image and performs an 
exclusive-OR of the message with the encrypting sequence. exclusive-OR of-the encrypted message with the second 
According to yet another aspect of the invention, a LSB plane of the digital image. The encrypted message 
method of data hiding is provided in which an encryption 65 generator performs an exclusive-OR of the input message 
key and a carrier signal that conveys information unrelated with the encrypting sequence to generate the encrypted 
to the encryption key are supplied. An encryption sequence message. 
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Additional features of the invention will become apparent generated in step 52. A message encrypting key is used in 

to those skilled in the art upon consideration of the following step 54 to generate an encryption sequence. The message 

detailed description of the preferred embodiments exempli- encrypting key can be a seed value for use in generating an 

fying the best mode of carrying out the invenlion as pres- m-sequence from a Unear feedback shift register as dis- 

ently perceived. 5 ^^y^^j ^^ ^^^^ ^gj^-j bdow, although it is understood that 

BRIEF DESCRIPTION OF THE DRAWINGS suitable message encrypting algorithm can be used. As 

also discussed below, the message encrypting key will 

FIG. 1 is a block diagram of two computer systems ultimately be used by the lecipient of the image embedded 

connected over a network, each computer system configured vvith the secret message, 
with a processor and memory for implementing embodi- 
ments of the present invention; 

.J A' Id step 56 the secret message from step 52 is encrypted 

FIG. 2 is a flow chart showmg a method according to the -^u c . . / 

. . «• r u-j- J 4 .... . r * With the encryption sequence from step 54 to create an 

present invention for hiding data withm an image for trans- jv ^ v 

mission over a network; 15 encrypted message. The encrypted message is then embed- 

- . . . ded into the image in step 58. There are many methods to 

FIG. 3 IS a high level block diagram showing a technique lj.i. 

for embedding encrypted information into a cirrier signal; ^-^bed /^e encrypted message into the image such as the 

method discussed below, but, again, it is understood that 

FIG. 4 IS a more detailed block diagram similar to FIG. 3 ^^^^^^ ^ ^ 

showing a similar, more specinc techmque tor embeddmg 
encrypted information into a carrier signal; 

FIG. 5 is a stylized representation of a message format ^^8^ ^^^^ embedded message is then made 

containing embedded, hidden information; available such as on a public network as shown m step 60. 

171^ . r J -» * • -I * iri/^ m c Finally, if the secret message from step 52 is actually 

FIG. 6 IS a stylized representation similar to FIG. 5 of an . ^ . ..... . 

alternative message format; and 25 information that is not desired to be kept secret, such as a 

-Of... 1 . 1 . publickey for an asymmetric encryption algorithm, then the 

FIG. 7 is a flow chart showmg an alternative method i r - a j i i_i 

according to the present invention for hiding data within an ^^^^^^^^ key from step 54 is also made available on the 

image for transmission over a network. P^*'^^ "^'^^'^ as shown in steps 62, 64. TTiis allows for 

third parties to extract the message from the image. Thus, for 

DETAILED DESCRIPTION OF THE example, the message can be a public encryption key that is 

ILLUSTRATIVE EMBODIMENTS hidden within the image but that is readily available to a 

^ . ^ party that has knowledge of the fact that the hidden message 

Represent invention lends Itself to implementation in a ^^^^ ^^^^^ ^ convenient way of exchanging 

conventional computer network 10 as shown in FIG. 1. . ^ . ,t • • j • , ^i- 

^ . . 1 in n . 1 • 1 J . -ic information, such as allowing an individual to make a public 

Computer network 10 illustratively mcludes computer sys- 35 ; ^ 

tems 12, 18 connected through a series of network commu- encryption key available over the World Wide Web by 
nication devices 14, 16, 20 (e.g., modems, transceivers, etc.) posting it withm an image on a Web site, while still 
for communication over a network 22 such as the standard concealing the information from the casual observer, 
telephone lines, or the Internet or World Wide Web. Com- 
puter systems 12, 18 are illustratively personal computers 40 ^j^j^ . j ^ ^^oy/idt some preliminary 
and each includes basic elements such as a processor definitions before discussing a specific implementation of 
memory 28, 34, storage device 30, 36 and display 31, 38. themethodof FIG. 2. The symbol ©denotes a bit exclusive- 
Computer systems 12, 18 can also include optional periph- i- , • , , « t ^ • x r« . , , 
eral devices such as removable storage dcWcc 40 (e.g. a (equivalently. modulo.2 addition). Table 1 
CD-ROM or 3'/. inch disk drive). 45 illustrates the exclusive-OR funcuon: 

An exemplary method of data hiding according to the TABLE 1 

present invention that is suitable for carrying out on com- 
puter network 10 is shown in FIG. 2. Although the present 
invention is disclosed in the context of certain embodiments 
discussing digital images, other digital signals, such as 
digital audio or video signals, are also within the scope of the 
invention. 

According to the method of FIG. 2, an image is used to 
transport and exchange data that is embedded in the image 

itself and that cannot be perceived by the human eye. An » j- -.^i • • . • n . j -.u a- 

. . • . . A digital maage is typically represented with a two dimen- 

appropnate analogy is that the image acts as an envelope, , <• • , . if a • *u ^ - i i 

•a- . u u ji i 1 . . •.. T -.u .u • i_ • sional array of pixel values. If A is the array of pixel values, 
with the embedded data transmitted with the image being , w ^ i , • . , • , . , /. . 

equivalent to a letter contained within the envelope. Con ^^""^y] ^^^P^^^.* ^^^^ ^ ^ ""-'^ 

ventional encryption such as PGP or RSA is used to enhance ^"^V" ^^^^ ^"^^'^ ^^^^^ 

security of the embedded data. The security is improved convention the origin is at the upper-left comer with positive 

because the encrypted data is hidden within the image and coordinates gomg rightwards and downwards, although this 

therefore cannot be recognized as such. This allows for convention is somewhat arbitrary. 

secure data communication and exchange over an insecure 

transmission channel, g5 For labeling purposes, it will be assumed that the digital 

In step 50 an original digital image is obtained. A secret image is a 24-bit RGB image with pixel values ordered as 

message that is desired to be embedded into the image is shown in Table 2: xx 
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0 


0 


] 


1 


1 


0 


1 


1 


1 


0 



us 6,912,658 Bl 
5 6 



TABLE 2 



MSB 






Red 














Green 










Blue 






LSB 


23 
R7 


22 
R6 


21 
RS 


20 19 
R4 R3 


IS 
R2 


17 
Rl 


16 
RO 


15 
G7 


14 
G6 


13 
G5 


12 11 
G4 G3 


10 
G2 


9 

Gl 


8 7 6 
GO 57 B6 


5 

B5 


4 3 
B4 B3 


2 

B2 


1 

Bl 


0 

BO 



Thus, bits 16-23 refer to the red component, bits 8-15 lo 
refer to the green component, and bits 0-7 refer to the blue 
component for any given pixel value. For example, I<7o(x,y) 
refers to the least-significant bit of the green component of 
the (x,y)-pixel in the image I. Since bit GO is equivalent to 
bit 8, lGo(x,y) is equivalent to l8(x,y). As with the array 15 
convention, this labeling convention is somewhat arbitrary. 

An m-sequcnce is a pseudo>random sequence of binary 
digits (bits), m-sequences have good statistical properties 
and can be generated by linear feedback shift registers 
(configured appropriately as is known in the art). Knowing 
the size (number of bits), structure (the feedback 
configuration), and initial fill (the initial contents of each bit) 
of the shift register allows the reconstruction of the entire 
m-sequence. The m -sequences here illustratively are gener- 
ated by a 96-bit m-sequence generator. If the structure and 
size of the shift register are known (as would be the case 
with this embodiment), and if a consecutive portion of the 
m-sequence equal to twice the shift register size is also 
known, the initial fill used to generate the sequence can be 
determined. In this embodiment the initial fill is used as the 
key that generates the m-sequence. In this way, the key can 
be determined from the sequence itself by techniques known 
to those skilled in cryptography. 

When embedding a message into a carrier signal, the 
order in which pixel operations are performed may be an 35 
important consideration. A sequence function z(i) is defined 
to provide a one-to-one mapping from i->(x,y), where i is an 
ordinal number and (x,y) refers to coordinate values in an 
image. The ordinal i ranges from zero to N-1, where N is the 
total number of pixels in the image. Given a sequence 40 
function z(i), one can compute z(0), z(l), z(2), etc., to obtain 
a sequence of pixel coordinates (Xj,yj), (x2,y2), etc. As an 
example, z(i)=(i mod ImageWidth, [i/ImageWidthJ ) 
denotes a sequence beginning at the origin and proceeding 
in a row-by -row fashion. 

Given these preliminary definitions, an implementation 
corresponding to the illustrative method of FIG. 2 of embed- 
ding a message into an image is shown by the block diagram 
in FIG, 3. Input signals are a source image 66 (obtained in 
step 50), an unencrypted message 68 (generated in step 52), 
and an encrypting key 70 (used in step 54). Message 68 and 
encrypting key 70 are processed by an encrypted message 
generator 76 to create an encrypted message signal 72. 
Encrypted message 72 is an input along with source image 
66 into composite signal generator 78, which creates a 55 
composite signal 74 containing source image signal 66 
embedded with encrypted message 72. 

Composite signal generator 78 illustratively embeds 
encrypted message 72 into the least-significant bit in the 
green plane \Go(^*y) of source image 66 to create a new 60 
least-significant green bit -plane VooiXyy) of composite sig- 
nal 74. In order subsequently to extract encrypted message 
72 from composite signal 74 (1') it will be necessary to know 
the original values of lao(^>y) ^^^^ source image 66. This 
can of course easily be accomplished by making the original, 65 
unmodified image signal 66 available. Composite signal 
generator 78, however, eliminates the requirement of using 



original image signal 66 by encoding the original Ico(x»y) 
into the least-significant red bit-plane r^(x,y) of composite 
signal 74 as discussed below. Thus, in order to extract the 
embedded encrypted message 72, only composite signal 74 
and the encrypting key 70 are needed. 

In order to use the method of FIGS. 2 and 3 both a sender 
and receiver of composite signal 74 will need an m-bit shift 
register with identical feedback configurations and a well- 
defined ordering function z(i) for any arbitrary image. The 
following steps describe the generation of the composite 
signal 74 (also referred to as public image Y) from original 
signal 66 (also referred to as original image I), unencrypted 
message 68 (illustratively a public encryption key, also 
referred to as }^pi/b\ and encrypting key 70 (also referred to 
as K/). As intimated above, encrypting key 70 (KJ is the 
initial fill of the m-sequence generator. 

In order to generate 1', I' is initially set to be an exact copy 
of I. r is then traversed in order z(i) and the red and green 
least-significant bit planes are set to: 



/'coW0)-A:pc;«(0e/'co(i(0)e/n-scq(2/+l) 

where lf^pug(i) refers to the I-th bit of Kp^^, and m-seq(j) 
refers lo the j-th bit in the m-sequence using K/ as the initial 
fill. With these two equations, information on portion 2 of 
the image (the green LSB plane) is first placed in portion 1 
of the image (the red LSB plane). Then, the message is 
embedded in portion 2. 

To recover Kp^^ it is only necessary to have the com- 
posite signal or public image I' and the encrypting key K,. 
For each pixel in V and in the order z(i), the first step is to 
extract 1^0* (z(i)) by using the least-significant red bit plane 
and the m -sequence: 

/co'W0)-/V6(^0)©'"-seq(20 

Ic?o*(z(i)) is identical to IcQ(z(i)) if there are no errors in T. 
Then the i-th bit of Kp^^i) is computed by using- Ico*(z(i)): 



Thus, given K„ it is possible lo reconstruct the same 
m-sequence used to generate 1'. llius, if no errors occur 
^puB* should be identical lo Kp^rs. Thus, the method of the 
invention provides for including within Ihe image both the 
message that is embedded or encrypted in the image as well 
as the information needed to extract or decrypt the message 
from the image. 

A more specific method corresponding to an implemen- 
Ution of the method of FIGS. 2 and 3 is shown FIG. 4. The 
same input signals are used, that is, source image 66 (I), 
message 68 (here, Q instead of Kp^jg), and encrypting key 
70 (K/) are used. The primary refinement in the method of 
FIG. 4 as compared with FIG. 3 is an encoding process to 
handle varying length messages 68. 

Message 68, which in the example of FIG. 3 was a public 
encryption key for use in an asymmetric cryptography 



/Wz(0H'co(2(0)®'»-«!q(20 



^^riy/.-(0-/'coW0)eico*W0)©'«-seq(2/-+i) 
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system, can more generally simply be a collection of bits 96-bit m-sequence generators, this can be achieved simply 

intended to be encrypted and is referred to here as Q. The by changing the feedback coeflBcients. Moreover, the mes- 

length (i.e., the total number of bits) of Q is denoted |Q|. The sage length 94 in the trailer can be relocated to data area 92 

i-th bit of the message Q is denoted Q(i), where the bits are as shown in FIG. 6. This relocation will limit the ability of 

numbered from 0 to |Q|-1. 5 an attacker to take advantage of a known size of message Q. 

Message 68 (Q) is an input signal to message generator 82 Another way to provide for security of data hidden within 

which has as a second input the output from a random noise a carrier image is shown by the method of FIG. 7. In step 102 

generator 84. Random noise generator 84 illustratively is the carrier image is transformed from a first domain to a 

also a 96-bit m-sequence generator using an initial fill of a second domain. For example, a typical RGB image that is 

computer system time value, although other suitable random lO considered to be represented in a spatial domain can be 

signal generators can be used. Encrypting key 70 (K,) is an transformed using a discrete cosine transform A message is 

input signal (initial fill) to an m-sequence generator 80 that then embedded into the transformed carrier image in step 

illustratively is the same as random noise generator 84, 104, using any appropriate technique for embedding a 

which then generates as an output an encrypting sequence message onto a carrier signal. An example of a transformed 

86. IS image into which a message can be embedded would be a 

Unless the message 68 (Q) will always be the same length JPEG image. If desired, the message can also be pre- 
(in bits) and that length is the number of pixels in the source encrypted before being embedded into the transformed 
image, it will not be possible to embed Q directly onto image to further improve security. The image is then trans- 
source image 66 (I). It is therefore necessary to encode formed back into the first domain in step 106 and made 
additional information that will enable subsequent extrac- 20 available for access by third parties in step 108. 
tion of messages Q of varying sizes from composite signal For a third party to extract the message the steps arc 
74 (r). Thus, the message 88 to be encoded onto image 66 essentially reversed. First the image is copied by the third 
(I) is generated by message generator 82 with special party in step 110, and it is then transformed into the second 
properties and is denoted Q' to show that it is derived from domain in step 112 using the same transform performed in 
Q. 25 step 106. Finally, the message is extracted in step 114, again, 

Q' has the following properties. For any given source using any appropriate technique that corresponds to the 

image 1, regardless of what message Q is being encoded, the technique used in step 104 for originally embedding the 

size of a message Q* is the same as the total number of pixels message. If the message was pre-encrypted then another 

in image 1 (that is, |Qi=# pixels in I). The bits of message Q' decryption step (not shown) will be necessary, 

are labeled according to standard convention, that is, the first 30 Encrypted messages relying on the use of encryption keys 

bit (or the left-most bit if 0' is viewed as an ordered bit are used in the methods discussed above. For example, if a 

stream from left to right as shown in FIG. 5) is numbered pre-encrypted message is embedded into an image, then the 

zero. Thus the bits of Q' are numbered from zero to |Q'|~1. recipient will need a key to decrypt the message. A technique 

The structure of 0' is shown in FIG. 5. All bits except the for providing for secure exchanges of encrypted data such as 

last sixty-four form a data area 92. llie last sixty-four bits 35 encryption keys that is known in the art is the use of a trusted 

consist of two thirty-two bit words (StartPos and Length, in third party. The trusted third party essentially acts as a secure 

that order), which form a Trailer. Data area 92 includes data broker in exchanging data between two other parties. It is 

bits 98 that correspond to the message Q itself, and random within the scope of this invention to exchange information, 

bits 97, 99 that help hide the location of Q (bits 98) within such as encryption keys, by use of a trusted third party. 

Q'. As part of the encoding process, message generator 82 40 Although the invention has been described in detail with 

computes the length of message Q and stores its value in the reference to certain illustrated embodiments, variations and 

final 32 bits 94 of the Trailer. The value of the length is not modifications exist within the scope and spirit of the present 

directly encoded and instead a value congruent (actual invention as described and defined in the following claims, 

length modulo Data Area size) is placed in the 32-bit word. What is claimed is: 

It is trivial to recover the length from this encoded value. 45 1. A method of data hiding comprising the steps of: 

Starting position 94 describes the location within data providing a message; 

area 92 where the bits of the message Q reside. Message generating an encrypting sequence based on an encrypting 

generator 82 randomly chooses a place 98 to store Q and |^gy. 

populates all other bits of unused portions 97, 99 in data area ^«o«,«to^ «,*co,«- k,«^ tu^ 

^^'^ • , , , , , • generatmg an encrypted message based on the message 

92 with random noise generated by random noise generator 50 . .uT^^ ....-l!. 

OA rx u u • J / n-i 1 1 J- and the encrypimg sequence; 

84. Thus, Q can be anywhere m data area 92. Includmg noise ... . . 7 . 

for portions 97, 99 of data area 92 unused by message Q providing a carrier signal that conveys mformation unre- 

improvcs security of data embedded within I because the ^^^""^ encrypted message; 

noise increases the difiSculty of recognizing the existence or embeddmg the encrypted message into the earner signal 

location of Q within the data area. 55 performing an exclusive-OR of the encrypted mes- 

The encoding of each bit of message Q' is encoded onto sage with a first portion of the carrier signal; and 

image I on a one-bit per one-pixel basis using an exclusive- embedding the first portion of the carrier signal into a 

OR as discussed above for the method of FIG. 3. First, the second portion of the carrier signal, 

output of m-sequence generator 80 (with as a seed value) 2. The method of claim 1, wherein the carrier signal is a 

is used to encrypt 0' in encrypter 90. Next, the encrypted Q' 60 digital image having a plurality of color planes, the first 

is embedded onto the LSB green plane l^ro- Encrypted portion of the carrier signal is an LSB plane of a first color 

message Q is subsequently extracted from Q' by locating its plane, and the second portion of the carrier signal is an LSB 

starting position and length from the IraUer. The extracted Q P^ane of a second color plane, 

is then decoded as discussed above. 3. A method of data hiding comprising the steps of: 

Further implementation steps can be taken to increase 65 providing an encryption key; 

security for message Q\ Random number generator 84 and generating an encryption sequence based on the encryp- 

m-scquence generator 80 can be different. Even if both use tion key; 
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providing a carrier signal that conveys information unre- 
lated to the encryption key; 

embedding the encryption sequence into the carrier 
signal, 

transmitting the carrier signal including the embedded 
encryption sequence to a receiving location, 

extracting the encryption sequence from the composite 
signal at the receiving location, and 

deciphering the encryption sequence to obtain the encryp- 
tion key at the receiving location. 

4. The method of claim 3, further comprising the steps of 
encrypting a message using the encryption key to generate 
an encrypted message at the receiving location and trans- 
mitting the encrypted message from the receiving location. 

5. A method of data hiding comprising the steps of: 
providing a carrier signal that conveys information unre- 
lated to the encryption key; 

embedding the encryption sequence into the carrier signal 
transmitting the carrier signal including the embedded 
encryption sequence to a receiving location, 

extracting the encryption sequence from the composite 
signal at the receiving location, and 
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deciphering the encryption sequence to obtain the encryp- 
tion key at the receiving location. 

6. The method of claim 5, wherein the step of embedding 
message extraction information includes performing an 

5 exclusive-OR of the first portion of the carrier signal with 
the second portion of the carrier signal. 

7. The method of claim 6, wherein the first and second 
portions of the carrier signal are first and second bit-planes 
of a digital image. 

10 8. A data hiding apparatus comprising: 

an encryption sequence generator configured to generate 

an encryption sequence based on an encrypting key; 
an encrypted message generator configured to generate an 
encrypted message based on the encryption sequence 
15 and an input message; and 

an encrypted message embedder configured to embed the 
encrypted message into a carrier signal by replacing a 
first LSB plane of a digital image with information 
based on a second LSB plane of the digital image and 
^° performing an exclusive-OR of the encrypted message 
with the second LSB plane of the digital image. 



